CVE sync 2026-11-11T22:34:12Z
This commit is contained in:
Vulnerability Bot
@@ -8,66 +8,28 @@
|
||||
"assignerShortName": "Fluid Attacks",
|
||||
"dateReserved": "2026-09-29T21:35:56.544Z",
|
||||
"datePublished": "2026-10-19T16:13:35.444Z",
|
||||
"dateUpdated": "2026-10-20T19:29:29.488Z"
|
||||
"dateUpdated": "2026-11-11T21:34:36.705Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
"providerMetadata": {
|
||||
"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869",
|
||||
"shortName": "Fluid Attacks",
|
||||
"dateUpdated": "2026-11-11T21:34:36.705Z"
|
||||
},
|
||||
"title": "PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host",
|
||||
"problemTypes": [
|
||||
{
|
||||
"cpes": [
|
||||
"cpe:2.3:a:streamsoft:pingtools_network_utilities:4.64:*:*:*:*:android:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"platforms": [
|
||||
"Android"
|
||||
],
|
||||
"product": "PingTools Network Utilities",
|
||||
"vendor": "StreamSoft",
|
||||
"versions": [
|
||||
"descriptions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "4.64"
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"cpeMatch": [
|
||||
{
|
||||
"criteria": "cpe:2.3:a:streamsoft:pingtools_network_utilities:4.64:*:*:*:*:android:*:*",
|
||||
"vulnerable": true
|
||||
}
|
||||
],
|
||||
"negate": false,
|
||||
"operator": "OR"
|
||||
}
|
||||
],
|
||||
"operator": "OR"
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"type": "finder",
|
||||
"value": "Andrés Ramos"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "<p>PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.</p>"
|
||||
}
|
||||
],
|
||||
"value": "PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions."
|
||||
}
|
||||
],
|
||||
"impacts": [
|
||||
{
|
||||
"descriptions": [
|
||||
@@ -78,90 +40,130 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "StreamSoft",
|
||||
"product": "PingTools Network Utilities",
|
||||
"platforms": [
|
||||
"Android"
|
||||
],
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "4.64",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:streamsoft:pingtools_network_utilities:4.64:*:*:*:*:android:*:*"
|
||||
]
|
||||
}
|
||||
],
|
||||
"cpeApplicability": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:streamsoft:pingtools_network_utilities:4.64:*:android:*:*:*:*:*"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p>PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host value to a ping command, serializes the command as a single string, and executes it through sh -c. A local attacker who can create or modify a Watcher service can inject shell syntax and execute arbitrary commands with the PingTools application UID and its granted Android permissions.</p>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://fluidattacks.com/advisories/yanderechainsawregurgitationfactory",
|
||||
"tags": [
|
||||
"third-party-advisory",
|
||||
"technical-description",
|
||||
"mitigation"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://play.google.com/store/apps/details?id=ua.com.streamsoft.pingtools",
|
||||
"tags": [
|
||||
"product"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"attackVector": "LOCAL",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"version": "4.0",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-78",
|
||||
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869",
|
||||
"shortName": "Fluid Attacks",
|
||||
"dateUpdated": "2026-10-19T21:18:59.554Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
"tags": [
|
||||
"third-party-advisory",
|
||||
"technical-description",
|
||||
"mitigation"
|
||||
],
|
||||
"url": "https://fluidattacks.com/advisories/yanderechainsawregurgitationfactory"
|
||||
},
|
||||
{
|
||||
"tags": [
|
||||
"product"
|
||||
],
|
||||
"url": "https://play.google.com/store/apps/details?id=ua.com.streamsoft.pingtools"
|
||||
"cvssV4_0": {
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED",
|
||||
"version": "4.0",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 8.6,
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Replace the sh -c execution path with a process API that accepts an argument list and preserves the validated Host as one argument. Validate Host as a supported DNS name or IPv4/IPv6 address in both the Watcher editor and backup-import path, reject shell syntax, whitespace and option-like input, add regression tests, backport the correction, and upgrade to the first fixed release when it becomes available. Until then, do not import untrusted Watcher backups and do not enter untrusted values in Watcher ICMP Host fields.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "<p>Replace the sh -c execution path with a process API that accepts an argument list and preserves the validated Host as one argument. Validate Host as a supported DNS name or IPv4/IPv6 address in both the Watcher editor and backup-import path, reject shell syntax, whitespace and option-like input, add regression tests, backport the correction, and upgrade to the first fixed release when it becomes available. Until then, do not import untrusted Watcher backups and do not enter untrusted values in Watcher ICMP Host fields.</p>"
|
||||
}
|
||||
],
|
||||
"value": "Replace the sh -c execution path with a process API that accepts an argument list and preserves the validated Host as one argument. Validate Host as a supported DNS name or IPv4/IPv6 address in both the Watcher editor and backup-import path, reject shell syntax, whitespace and option-like input, add regression tests, backport the correction, and upgrade to the first fixed release when it becomes available. Until then, do not import untrusted Watcher backups and do not enter untrusted values in Watcher ICMP Host fields."
|
||||
]
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Andrés Ramos",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"title": "PingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host",
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 0.2.0"
|
||||
}
|
||||
|
||||
@@ -0,0 +1,28 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-107922",
|
||||
"assignerOrgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
|
||||
"state": "REJECTED",
|
||||
"dateReserved": "2026-10-09T07:33:58.359Z",
|
||||
"dateUpdated": "2026-11-11T22:18:59.410Z",
|
||||
"dateRejected": "2026-11-11T22:18:59.410Z",
|
||||
"assignerShortName": "GitLab"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "ceab7361-8a18-47b1-92ba-4d7d25f6715a",
|
||||
"shortName": "GitLab",
|
||||
"dateUpdated": "2026-11-11T22:18:59.410Z"
|
||||
},
|
||||
"rejectedReasons": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-111521",
|
||||
"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "dell",
|
||||
"dateReserved": "2026-10-16T10:04:03.177Z",
|
||||
"datePublished": "2026-11-11T21:57:00.847Z",
|
||||
"dateUpdated": "2026-11-11T21:57:00.847Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
|
||||
"shortName": "dell",
|
||||
"dateUpdated": "2026-11-11T21:57:00.847Z"
|
||||
},
|
||||
"datePublic": "2026-11-10T21:55:00.000Z",
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-367",
|
||||
"description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Dell",
|
||||
"product": "Display and Peripheral Manager (DDPM Windows)",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "2.4.0.17",
|
||||
"versionType": "semver"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.4.0.17, contain a Time-of-check Time-of-use (TOCTOU) Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000527625/dsa-2026-482-security-update-for-dell-display-and-peripheral-manager-ddpm-windows-for-a-time-of-check-time-of-use-toctou-vulnerability",
|
||||
"tags": [
|
||||
"vendor-advisory"
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
],
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseSeverity": "HIGH",
|
||||
"baseScore": 7,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
|
||||
}
|
||||
}
|
||||
],
|
||||
"credits": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Dell would like to thank Steffen Rogge for reporting this issue.",
|
||||
"type": "finder"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.5"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,123 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121526",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-03T14:32:06.815Z",
|
||||
"datePublished": "2026-11-11T21:31:49.831Z",
|
||||
"dateUpdated": "2026-11-11T21:31:49.831Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.5.0",
|
||||
"lessThanOrEqual": "6.5.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:49.831Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-601",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 5.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "REQUIRED",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-191",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-191"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,128 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121527",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-03T14:32:07.977Z",
|
||||
"datePublished": "2026-11-11T21:31:52.231Z",
|
||||
"dateUpdated": "2026-11-11T21:31:52.231Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiClientEMS",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.3",
|
||||
"lessThanOrEqual": "7.4.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.12",
|
||||
"lessThanOrEqual": "7.2.15",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:52.231Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-250",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "LOCAL",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 6.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-192",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-192"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,178 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-121528",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-03T14:32:10.363Z",
|
||||
"datePublished": "2026-11-11T21:31:53.978Z",
|
||||
"dateUpdated": "2026-11-11T21:31:53.978Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.19",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.4.0",
|
||||
"lessThanOrEqual": "6.4.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper certificate validation vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.13 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:53.978Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-295",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiOS version 8.0.0 or above\nUpgrade to FortiOS version 7.6.5 or above\nUpgrade to FortiOS version 7.4.10 or above\nUpgrade to FortiOS version 7.2.14 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-193",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-193"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,233 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126144",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:17.179Z",
|
||||
"datePublished": "2026-11-11T21:28:56.637Z",
|
||||
"dateUpdated": "2026-11-11T21:28:56.637Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiRecorder",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.6",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiVoice",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortivoice:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.5",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.8",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2 all versions, FortiRecorder 7.6.0 through 7.6.2, FortiRecorder 7.2.0 through 7.2.12, FortiRecorder 7.0.0 through 7.0.6, FortiVoice 8.0.0 through 8.0.1, FortiVoice 7.4.0 through 7.4.2, FortiVoice 7.2.0 through 7.2.5, FortiVoice 7.0.0 through 7.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:28:56.637Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiVoice version 8.0.2 or above\nUpgrade to upcoming FortiVoice version 7.4.3 or above\nUpgrade to upcoming FortiVoice version 7.2.6 or above\nUpgrade to upcoming FortiVoice version 7.0.9 or above\nUpgrade to upcoming FortiRecorder version 7.6.3 or above\nUpgrade to upcoming FortiRecorder version 7.2.13 or above\nUpgrade to upcoming FortiRecorder version 7.0.7 or above\nUpgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.5 or above\nUpgrade to FortiMail version 7.4.7 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-196",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-196"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126145",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:19.462Z",
|
||||
"datePublished": "2026-11-11T21:28:54.772Z",
|
||||
"dateUpdated": "2026-11-11T21:28:54.772Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated administrator with system-time read-write access to execute unauthorized code or commands as root."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:28:54.772Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-197",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-197"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,175 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126146",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:20.762Z",
|
||||
"datePublished": "2026-11-11T21:28:58.040Z",
|
||||
"dateUpdated": "2026-11-11T21:28:58.040Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiRecorder",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "7.6.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.6",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2.0 through 7.2.9, FortiRecorder 7.6.0, FortiRecorder 7.2.0 through 7.2.11, FortiRecorder 7.0.0 through 7.0.6 may allow an authenticated privileged attacker to execute unauthorized code or commands via a specifically crafted archive account configuration."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:28:58.040Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiRecorder version 7.6.3 or above\nUpgrade to upcoming FortiRecorder version 7.2.13 or above\nUpgrade to upcoming FortiRecorder version 7.0.7 or above\nUpgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.5 or above\nUpgrade to FortiMail version 7.4.7 or above\nUpgrade to upcoming FortiMail version 7.2.10 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-198",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-198"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126147",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:22.660Z",
|
||||
"datePublished": "2026-11-11T21:29:16.713Z",
|
||||
"dateUpdated": "2026-11-11T21:29:16.713Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:16.713Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-22",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-199",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-199"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,103 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126148",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:25.970Z",
|
||||
"datePublished": "2026-11-11T21:28:59.138Z",
|
||||
"dateUpdated": "2026-11-11T21:28:59.138Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HA join-request packets."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:28:59.138Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-200",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-200"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,150 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126149",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:29.069Z",
|
||||
"datePublished": "2026-11-11T21:29:03.844Z",
|
||||
"dateUpdated": "2026-11-11T21:29:03.844Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to crash the daemon."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:03.844Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-190",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-201",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-201"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,129 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126150",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:30.281Z",
|
||||
"datePublished": "2026-11-11T21:29:00.809Z",
|
||||
"dateUpdated": "2026-11-11T21:29:00.809Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.5",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to reset the password of an arbitrary IBE webmail user and take over their account via specially crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:00.809Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-640",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 9.1,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.1 or above\nUpgrade to FortiMail version 7.6.6 or above\nUpgrade to FortiMail version 7.4.8 or above\nUpgrade to upcoming FortiMail version 7.2.10 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-202",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-202"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126151",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:31.681Z",
|
||||
"datePublished": "2026-11-11T21:29:14.136Z",
|
||||
"dateUpdated": "2026-11-11T21:29:14.136Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to gain elevation of privilege (account takeover) via a crafted request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:14.136Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-303",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-203",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-203"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,150 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126152",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:33.618Z",
|
||||
"datePublished": "2026-11-11T21:29:14.754Z",
|
||||
"dateUpdated": "2026-11-11T21:29:14.754Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users' calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:14.754Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-639",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 7.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-204",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-204"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126153",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:35.280Z",
|
||||
"datePublished": "2026-11-11T21:29:13.400Z",
|
||||
"dateUpdated": "2026-11-11T21:29:13.400Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized commands via crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:13.400Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-22",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-205",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-205"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126154",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:37.002Z",
|
||||
"datePublished": "2026-11-11T21:29:13.715Z",
|
||||
"dateUpdated": "2026-11-11T21:29:13.715Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to cause a denial of service via a specially crafted HTTP request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:13.715Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-206",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-206"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126155",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:39.254Z",
|
||||
"datePublished": "2026-11-11T21:29:10.341Z",
|
||||
"dateUpdated": "2026-11-11T21:29:10.341Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or send their encrypted mail via crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:10.341Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 9.1,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-207",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-207"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126156",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:40.696Z",
|
||||
"datePublished": "2026-11-11T21:29:14.950Z",
|
||||
"dateUpdated": "2026-11-11T21:29:14.950Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to take over an arbitrary IBE recipient account via crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:14.950Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-639",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 9.1,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-208",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-208"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,150 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126157",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:42.195Z",
|
||||
"datePublished": "2026-11-11T21:29:09.159Z",
|
||||
"dateUpdated": "2026-11-11T21:29:09.159Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to gain access to other users' secure email accounts via crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:09.159Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-287",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 9.1,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-209",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-209"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,90 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126158",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:44.611Z",
|
||||
"datePublished": "2026-11-11T21:29:12.696Z",
|
||||
"dateUpdated": "2026-11-11T21:29:12.696Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow an authenticated administrator to execute unauthorized code or commands as root via specially crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:12.696Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-210",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-210"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126159",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:46.218Z",
|
||||
"datePublished": "2026-11-11T21:29:17.990Z",
|
||||
"dateUpdated": "2026-11-11T21:29:17.990Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:17.990Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-639",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-211",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-211"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126160",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:47.807Z",
|
||||
"datePublished": "2026-11-11T21:29:19.376Z",
|
||||
"dateUpdated": "2026-11-11T21:29:19.376Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to escalate privileges and release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:19.376Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-287",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-212",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-212"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,116 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126161",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:49.457Z",
|
||||
"datePublished": "2026-11-11T21:29:23.614Z",
|
||||
"dateUpdated": "2026-11-11T21:29:23.614Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.6",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.6 may allow a remote unauthenticated attacker to cause a denial of service via repeated unauthenticated POST requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:23.614Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-400",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-213",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-213"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,103 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126162",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:50.954Z",
|
||||
"datePublished": "2026-11-11T21:29:21.221Z",
|
||||
"dateUpdated": "2026-11-11T21:29:21.221Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:21.221Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-91",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-214",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-214"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,90 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126163",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:52.577Z",
|
||||
"datePublished": "2026-11-11T21:29:25.391Z",
|
||||
"dateUpdated": "2026-11-11T21:29:25.391Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted SMTP command."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:25.391Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-134",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-215",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-215"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,134 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126164",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:54.228Z",
|
||||
"datePublished": "2026-11-11T21:29:26.070Z",
|
||||
"dateUpdated": "2026-11-11T21:29:26.070Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:26.070Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 9.4,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-216",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-216"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,150 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126165",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:56.072Z",
|
||||
"datePublished": "2026-11-11T21:29:24.082Z",
|
||||
"dateUpdated": "2026-11-11T21:29:24.082Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to cause a denial of service via a specially crafted attachment delivered over SMTP."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:24.082Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-789",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-217",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-217"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,135 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126166",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:57.660Z",
|
||||
"datePublished": "2026-11-11T21:30:03.160Z",
|
||||
"dateUpdated": "2026-11-11T21:30:03.160Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:03.160Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-88",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiMail version 8.0.3 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,135 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126167",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:58.395Z",
|
||||
"datePublished": "2026-11-11T21:29:59.621Z",
|
||||
"dateUpdated": "2026-11-11T21:29:59.621Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:59.621Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-77",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiMail version 8.0.3 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,135 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126168",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:03:59.395Z",
|
||||
"datePublished": "2026-11-11T21:30:00.722Z",
|
||||
"dateUpdated": "2026-11-11T21:30:00.722Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:00.722Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-88",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiMail version 8.0.3 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,135 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126169",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:04:00.242Z",
|
||||
"datePublished": "2026-11-11T21:30:03.318Z",
|
||||
"dateUpdated": "2026-11-11T21:30:03.318Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.6",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.8",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.9",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:03.318Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-88",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiMail version 8.0.3 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-218"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,217 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126170",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:04:05.712Z",
|
||||
"datePublished": "2026-11-11T21:30:02.652Z",
|
||||
"dateUpdated": "2026-11-11T21:30:02.652Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.1",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.1",
|
||||
"lessThanOrEqual": "8.0.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer-BigData",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzer-bigdata:7.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.2",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2, FortiManager 7.6.0 through 7.6.7, FortiManager Cloud 8.0.1 through 8.0.2, FortiManager Cloud 7.6.0 through 7.6.7 may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:02.652Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-116",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiManager version 8.0.3 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to upcoming FortiManager Cloud version 8.0.3 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to upcoming FortiAnalyzer-BigData version 7.6.3 or above\nUpgrade to FortiAnalyzer-BigData version 7.4.7 or above\nUpgrade to upcoming FortiAnalyzer-BigData version 7.2.13 or above\nUpgrade to upcoming FortiAnalyzer version 8.0.3 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to upcoming FortiAnalyzer Cloud version 8.0.3 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-219",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-219"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,425 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126171",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:04:12.449Z",
|
||||
"datePublished": "2026-11-11T21:29:59.692Z",
|
||||
"dateUpdated": "2026-11-11T21:29:59.692Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.1",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.1",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute unauthorized commands via specially crafted HTTP request"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:59.692Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-134",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-220",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-220"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,305 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126175",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:02.441Z",
|
||||
"datePublished": "2026-11-11T21:30:07.098Z",
|
||||
"dateUpdated": "2026-11-11T21:30:07.098Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.2",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.2",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.2",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.2",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.2 through 7.2.12, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.2 through 7.2.13, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.2 through 7.2.12, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.2 through 7.2.13 may allow an authenticated attacker to execute unauthorized code or commands via crafted JSON-RPC requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:07.098Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.0 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.0 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.0 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.0 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-221",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-221"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,329 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126176",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:08.231Z",
|
||||
"datePublished": "2026-11-11T21:30:30.791Z",
|
||||
"dateUpdated": "2026-11-11T21:30:30.791Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:30.791Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-91",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-222",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-222"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,329 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126177",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:09.309Z",
|
||||
"datePublished": "2026-11-11T21:30:30.450Z",
|
||||
"dateUpdated": "2026-11-11T21:30:30.450Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:30.450Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-91",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-222",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-222"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,341 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126178",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:19.657Z",
|
||||
"datePublished": "2026-11-11T21:30:26.569Z",
|
||||
"dateUpdated": "2026-11-11T21:30:26.569Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via a crafted request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:26.569Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-223",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-223"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,329 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126179",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:25.114Z",
|
||||
"datePublished": "2026-11-11T21:30:04.164Z",
|
||||
"dateUpdated": "2026-11-11T21:30:04.164Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to execute unauthorized code or commands via specially crafted requests"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:04.164Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-224",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-224"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,209 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126180",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:28.711Z",
|
||||
"datePublished": "2026-11-11T21:30:00.428Z",
|
||||
"dateUpdated": "2026-11-11T21:30:00.428Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow a low privileged Device Manager admin to obtain super admin privilege on managed FortiGates via injecting malicious commands."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:00.428Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-1336",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "REQUIRED",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-225",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-225"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,142 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126181",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:31.263Z",
|
||||
"datePublished": "2026-11-11T21:29:57.274Z",
|
||||
"dateUpdated": "2026-11-11T21:29:57.274Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh of the affected FortiGate deployment via the default pre-shared key."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:29:57.274Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-798",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "ADJACENT_NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-226",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-226"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,207 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126182",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:32.844Z",
|
||||
"datePublished": "2026-11-11T21:30:30.930Z",
|
||||
"dateUpdated": "2026-11-11T21:30:30.930Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow a remote authenticated attacker to execute unauthorized code or commands via crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:30.930Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-94",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-227",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-227"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,204 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126183",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:35.752Z",
|
||||
"datePublished": "2026-11-11T21:30:33.338Z",
|
||||
"dateUpdated": "2026-11-11T21:30:33.338Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:33.338Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-639",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to upcoming FortiManager Cloud version 7.4.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-228",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-228"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,335 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126184",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:37.722Z",
|
||||
"datePublished": "2026-11-11T21:30:34.611Z",
|
||||
"dateUpdated": "2026-11-11T21:30:34.611Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an attacker to disrupt the HA state."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:34.611Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-290",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-229",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-229"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,267 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126185",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:44.597Z",
|
||||
"datePublished": "2026-11-11T21:30:50.443Z",
|
||||
"dateUpdated": "2026-11-11T21:30:50.443Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands via specially crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:50.443Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-94",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-230",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-230"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,195 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126211",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:47.700Z",
|
||||
"datePublished": "2026-11-11T21:31:07.366Z",
|
||||
"dateUpdated": "2026-11-11T21:31:07.366Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.1",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.1",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.1",
|
||||
"lessThanOrEqual": "7.6.8",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.1",
|
||||
"lessThanOrEqual": "7.6.8",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.1 through 7.6.8, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.1 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.1 through 7.6.8 may allow an authenticated privileged attacker to elevate their privileges via crafted JSON-RPC request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:07.366Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-269",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-231",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-231"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,267 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126212",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:53.626Z",
|
||||
"datePublished": "2026-11-11T21:30:33.664Z",
|
||||
"dateUpdated": "2026-11-11T21:30:33.664Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:33.664Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-122",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-232",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-232"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,343 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126213",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:56.227Z",
|
||||
"datePublished": "2026-11-11T21:31:03.916Z",
|
||||
"dateUpdated": "2026-11-11T21:31:03.916Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute unauthorized SQL commands via specially crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:03.916Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-233",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-233"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,272 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126214",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:07:59.845Z",
|
||||
"datePublished": "2026-11-11T21:31:34.736Z",
|
||||
"dateUpdated": "2026-11-11T21:31:34.736Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:34.736Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-290",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,341 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126215",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:00.992Z",
|
||||
"datePublished": "2026-11-11T21:31:29.491Z",
|
||||
"dateUpdated": "2026-11-11T21:31:29.491Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:29.491Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,204 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126216",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:02.270Z",
|
||||
"datePublished": "2026-11-11T21:31:33.421Z",
|
||||
"dateUpdated": "2026-11-11T21:31:33.421Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:33.421Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-269",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 3.8,
|
||||
"baseSeverity": "LOW",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,341 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126217",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:03.297Z",
|
||||
"datePublished": "2026-11-11T21:31:29.318Z",
|
||||
"dateUpdated": "2026-11-11T21:31:29.318Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:29.318Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-234"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,122 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126218",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:19.441Z",
|
||||
"datePublished": "2026-11-11T21:30:53.697Z",
|
||||
"dateUpdated": "2026-11-11T21:30:53.697Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11 may allow a remote authenticated attacker with admin permission to elevate their privileges to root via crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:53.697Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-639",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-235",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-235"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,255 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126219",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:20.846Z",
|
||||
"datePublished": "2026-11-11T21:31:24.283Z",
|
||||
"dateUpdated": "2026-11-11T21:31:24.283Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:24.283Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-22",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-236",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-236"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,119 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126220",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:21.805Z",
|
||||
"datePublished": "2026-11-11T21:31:24.528Z",
|
||||
"dateUpdated": "2026-11-11T21:31:24.528Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:24.528Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-74",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-236",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-236"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,255 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126221",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:22.541Z",
|
||||
"datePublished": "2026-11-11T21:31:22.961Z",
|
||||
"dateUpdated": "2026-11-11T21:31:22.961Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:22.961Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-74",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-236",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-236"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,185 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126222",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:29.336Z",
|
||||
"datePublished": "2026-11-11T21:31:11.250Z",
|
||||
"dateUpdated": "2026-11-11T21:31:11.250Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.3",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.3",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.3",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.3",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.3 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.3 through 7.6.7, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.3 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.3 through 7.6.7 may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:11.250Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-22",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-237",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-237"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,267 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126223",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:32.601Z",
|
||||
"datePublished": "2026-11-11T21:30:34.728Z",
|
||||
"dateUpdated": "2026-11-11T21:30:34.728Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:34.728Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-121",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-238",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-238"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,329 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126224",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:35.263Z",
|
||||
"datePublished": "2026-11-11T21:31:33.631Z",
|
||||
"dateUpdated": "2026-11-11T21:31:33.631Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated privileged admin user to execute unauthorized code or commands."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:33.631Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-88",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-239",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-239"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,161 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126225",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:41.327Z",
|
||||
"datePublished": "2026-11-11T21:31:27.084Z",
|
||||
"dateUpdated": "2026-11-11T21:31:27.084Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.7, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.7 may allow an authenticated attacker to elevate their privileges via crafted JSON-RPC request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:27.084Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-862",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-240",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-240"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,329 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126226",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:44.782Z",
|
||||
"datePublished": "2026-11-11T21:30:42.152Z",
|
||||
"dateUpdated": "2026-11-11T21:30:42.152Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated privileged attacker to execute unauthorized code or commands via crafted report schedule name."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:42.152Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-241",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-241"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,335 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126227",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:51.693Z",
|
||||
"datePublished": "2026-11-11T21:31:25.884Z",
|
||||
"dateUpdated": "2026-11-11T21:31:25.884Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute commands outside of the intended scope via specially crafted HTTP request"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:25.884Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-441",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-242",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-242"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,327 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126228",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:08:56.054Z",
|
||||
"datePublished": "2026-11-11T21:31:30.119Z",
|
||||
"dateUpdated": "2026-11-11T21:31:30.119Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.4",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.4",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.4",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.4",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.4 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.4 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.4 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.4 through 7.2.12 may allow an authenticated remote attacker with admin privileges to execute unauthorized code or commands via a specially crafted request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:30.119Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-243",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-243"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,429 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126229",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:01.512Z",
|
||||
"datePublished": "2026-11-11T21:35:18.269Z",
|
||||
"dateUpdated": "2026-11-11T21:35:18.269Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.1",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.1",
|
||||
"lessThanOrEqual": "7.0.16",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2 all versions, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow an authenticated administrator to access to other VDOMs via specially crafted HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:35:18.269Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-639",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.1,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-244",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-244"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,341 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126230",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:05.244Z",
|
||||
"datePublished": "2026-11-11T21:30:40.873Z",
|
||||
"dateUpdated": "2026-11-11T21:30:40.873Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:40.873Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-134",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-245",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-245"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,323 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126231",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:08.839Z",
|
||||
"datePublished": "2026-11-11T21:30:39.172Z",
|
||||
"dateUpdated": "2026-11-11T21:30:39.172Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2 all versions, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow an authenticated attacker to execute unauthorized commands via a crafted HTTP request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:39.172Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-246",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-246"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,339 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126232",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:13.512Z",
|
||||
"datePublished": "2026-11-11T21:30:46.856Z",
|
||||
"dateUpdated": "2026-11-11T21:30:46.856Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2 all versions, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow a MITM attacker to impersonate the radius server via a rogue RADIUS server."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:30:46.856Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-295",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "ADJACENT_NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-247",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-247"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,341 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126233",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:18.101Z",
|
||||
"datePublished": "2026-11-11T21:31:21.093Z",
|
||||
"dateUpdated": "2026-11-11T21:31:21.093Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to upload arbitrary files via specially crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:21.093Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-434",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-248",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-248"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,129 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126234",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:22.597Z",
|
||||
"datePublished": "2026-11-11T21:31:21.596Z",
|
||||
"dateUpdated": "2026-11-11T21:31:21.596Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8.0.0, FortiManager 8.0.0, FortiManager Cloud 8.0.0 may allow an authenticated attacker with restricted privileges to execute unauthorized code or commands via a specially crafted request."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:21.596Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-1336",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager Cloud version 8.0.1 or above\nUpgrade to FortiAnalyzer version 8.0.1 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.1 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-249",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-249"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,303 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126235",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:25.500Z",
|
||||
"datePublished": "2026-11-11T21:31:23.876Z",
|
||||
"dateUpdated": "2026-11-11T21:31:23.876Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.2",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.7",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.10",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.2",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.7",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.10",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.2 through 7.6.7, FortiAnalyzer 7.4.7 through 7.4.11, FortiAnalyzer 7.2.10 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.2 through 7.6.7, FortiManager 7.4.7 through 7.4.11, FortiManager 7.2.10 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to write arbitrary files via a specially crafted archive."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:23.876Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-22",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-250",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-250"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,335 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126236",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:28.825Z",
|
||||
"datePublished": "2026-11-11T21:31:36.058Z",
|
||||
"dateUpdated": "2026-11-11T21:31:36.058Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimanagercloud:8.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer Cloud",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortianalyzercloud:8.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.1",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.1",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted HTTP requests"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:36.058Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-78",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.2 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiManager Cloud version 8.0.2 or above\nUpgrade to FortiManager Cloud version 7.6.8 or above\nUpgrade to FortiManager Cloud version 7.4.12 or above\nUpgrade to FortiManager Cloud version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above\nUpgrade to FortiAnalyzer Cloud version 8.0.2 or above\nUpgrade to FortiAnalyzer Cloud version 7.6.8 or above\nUpgrade to FortiAnalyzer Cloud version 7.4.12 or above\nUpgrade to FortiAnalyzer Cloud version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-251",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-251"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126237",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:35.016Z",
|
||||
"datePublished": "2026-11-11T21:31:22.149Z",
|
||||
"dateUpdated": "2026-11-11T21:31:22.149Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to cause a denial of service via crafted TCP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:22.149Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-835",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-252",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-252"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126238",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:36.137Z",
|
||||
"datePublished": "2026-11-11T21:31:27.516Z",
|
||||
"dateUpdated": "2026-11-11T21:31:27.516Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass authorization checks and gain unauthorized access to restricted functionality."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:27.516Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-253",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-253"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126239",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:37.231Z",
|
||||
"datePublished": "2026-11-11T21:31:35.102Z",
|
||||
"dateUpdated": "2026-11-11T21:31:35.102Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to crash the FSSO subsystem via crafted http requests"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:35.102Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-121",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-254",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-254"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126240",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:38.423Z",
|
||||
"datePublished": "2026-11-11T21:31:29.472Z",
|
||||
"dateUpdated": "2026-11-11T21:31:29.472Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to bypass authentication. Successful exploitation requires either a malicious/compromised upstream IdP, or an IdP configuration that allows the user to control the NameID (or the SAML attribute used as the username)."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:29.472Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-90",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-255",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-255"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,121 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126241",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:39.507Z",
|
||||
"datePublished": "2026-11-11T21:31:35.181Z",
|
||||
"dateUpdated": "2026-11-11T21:31:35.181Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.5.2:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.5.2",
|
||||
"lessThanOrEqual": "6.5.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized SQL commands on the underlying database."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:35.181Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-256",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-256"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126242",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:40.669Z",
|
||||
"datePublished": "2026-11-11T21:31:20.079Z",
|
||||
"dateUpdated": "2026-11-11T21:31:20.079Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access. Full impersonation however requires the attacker to obtain pre-required id and data via other means."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:20.079Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above\nUpgrade to upcoming FortiAuthenticator version 6.5.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-257",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-257"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126243",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:41.253Z",
|
||||
"datePublished": "2026-11-11T21:31:21.473Z",
|
||||
"dateUpdated": "2026-11-11T21:31:21.473Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access. Full impersonation however requires the attacker to obtain pre-required id and data via other means."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:21.473Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above\nUpgrade to upcoming FortiAuthenticator version 6.5.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-257",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-257"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126244",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:42.853Z",
|
||||
"datePublished": "2026-11-11T21:31:38.071Z",
|
||||
"dateUpdated": "2026-11-11T21:31:38.071Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to exhaust system resources, potentially resulting in a denial of service (DoS)."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:38.071Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-770",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-258",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-258"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126245",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:44.095Z",
|
||||
"datePublished": "2026-11-11T21:31:40.840Z",
|
||||
"dateUpdated": "2026-11-11T21:31:40.840Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to execute unauthorized code or commands via http requests, should the attacker be able to defeat ASLR protections."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:40.840Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-787",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-259",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-259"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126246",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:45.189Z",
|
||||
"datePublished": "2026-11-11T21:31:42.366Z",
|
||||
"dateUpdated": "2026-11-11T21:31:42.366Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to perform a denial of service attack via http requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:42.366Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-476",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-260",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-260"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126247",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:46.561Z",
|
||||
"datePublished": "2026-11-11T21:31:41.907Z",
|
||||
"dateUpdated": "2026-11-11T21:31:41.907Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated privileged attacker to execute unauthorized code or commands via http requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:41.907Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-134",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-261",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-261"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126248",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:47.977Z",
|
||||
"datePublished": "2026-11-11T21:31:44.940Z",
|
||||
"dateUpdated": "2026-11-11T21:31:44.940Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:44.940Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-522",
|
||||
"description": "Information disclosure",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-262",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-262"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126249",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:49.476Z",
|
||||
"datePublished": "2026-11-11T21:31:42.156Z",
|
||||
"dateUpdated": "2026-11-11T21:31:42.156Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to escalate privileges."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:42.156Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-269",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-263",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-263"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126250",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:50.790Z",
|
||||
"datePublished": "2026-11-11T21:31:45.240Z",
|
||||
"dateUpdated": "2026-11-11T21:31:45.240Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to cause a denial of service via HTTP requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:45.240Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-264",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-264"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126251",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:52.293Z",
|
||||
"datePublished": "2026-11-11T21:31:45.917Z",
|
||||
"dateUpdated": "2026-11-11T21:31:45.917Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:45.917Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-863",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.1,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-265",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-265"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126252",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:53.760Z",
|
||||
"datePublished": "2026-11-11T21:31:46.520Z",
|
||||
"dateUpdated": "2026-11-11T21:31:46.520Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated attacker to execute unauthorized code or commands via http requests"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:46.520Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "LOW",
|
||||
"baseScore": 8.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-266",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-266"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,168 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126253",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:55.190Z",
|
||||
"datePublished": "2026-11-11T21:31:47.633Z",
|
||||
"dateUpdated": "2026-11-11T21:31:47.633Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.1",
|
||||
"lessThanOrEqual": "7.0.19",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:47.633Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-305",
|
||||
"description": "Improper access control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "ADJACENT_NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.3,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiOS version 8.0.2 or above\nUpgrade to FortiOS version 7.6.8 or above\nUpgrade to FortiOS version 7.4.13 or above\nUpgrade to FortiOS version 7.2.14 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-267",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-267"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,143 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126254",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:56.646Z",
|
||||
"datePublished": "2026-11-11T21:31:50.608Z",
|
||||
"dateUpdated": "2026-11-11T21:31:50.608Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted request"
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:50.608Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-197",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.6,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:F/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiOS version 8.0.2 or above\nUpgrade to FortiOS version 7.6.8 or above\nUpgrade to FortiOS version 7.4.13 or above\nUpgrade to FortiOS version 7.2.14 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-268",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-268"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,211 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126255",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:09:59.145Z",
|
||||
"datePublished": "2026-11-11T21:31:52.405Z",
|
||||
"dateUpdated": "2026-11-11T21:31:52.405Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiPAM",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "1.6.0",
|
||||
"lessThanOrEqual": "1.6.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "1.5.0",
|
||||
"lessThanOrEqual": "1.5.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "1.4.0",
|
||||
"lessThanOrEqual": "1.4.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "1.3.0",
|
||||
"lessThanOrEqual": "1.3.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "1.2.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "1.1.0",
|
||||
"lessThanOrEqual": "1.1.2",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "1.0.0",
|
||||
"lessThanOrEqual": "1.0.3",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A path traversal: '../filedir' vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an unauthenticated attacker to bypass authentication via specially crafted credentials."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:52.405Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-24",
|
||||
"description": "Denial of service",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to upcoming FortiPAM version 7.0.1 or above\nUpgrade to FortiPAM version 1.9.3 or above\nUpgrade to upcoming FortiPAM version 1.8.5 or above\nUpgrade to upcoming FortiPAM version 1.7.3 or above\nUpgrade to FortiOS version 8.0.2 or above\nUpgrade to FortiOS version 7.6.8 or above\nUpgrade to FortiOS version 7.4.13 or above\nUpgrade to FortiOS version 7.2.14 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-269",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-269"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,171 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126256",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:10:03.791Z",
|
||||
"datePublished": "2026-11-11T21:31:52.364Z",
|
||||
"dateUpdated": "2026-11-11T21:31:52.364Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.14",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.19",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A out-of-bounds read vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow a remote privileged attacker to execute arbitrary code or command via crafted paquets."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:52.364Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-125",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiOS version 8.0.2 or above\nUpgrade to FortiOS version 7.6.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-270",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-270"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126257",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:10:07.651Z",
|
||||
"datePublished": "2026-11-11T21:31:50.497Z",
|
||||
"dateUpdated": "2026-11-11T21:31:50.497Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAuthenticator",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortiauthenticator:6.6.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.3",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "6.6.0",
|
||||
"lessThanOrEqual": "6.6.10",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:50.497Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-259",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiAuthenticator version 8.0.4 or above\nUpgrade to FortiAuthenticator version 6.6.11 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-271",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-271"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,92 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126258",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:10:09.146Z",
|
||||
"datePublished": "2026-11-11T21:31:50.602Z",
|
||||
"dateUpdated": "2026-11-11T21:31:50.602Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"version": "7.6.7",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A stack-based buffer overflow vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.7 may allow an unauthenticated attacker with wad port access to crash proxy or ZTNA sessions via crafted HTTP or HTTPS requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:50.602Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-121",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiOS version 8.0.1 or above\nUpgrade to FortiOS version 7.6.8 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-272",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-272"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,166 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126259",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:10:11.024Z",
|
||||
"datePublished": "2026-11-11T21:31:53.632Z",
|
||||
"dateUpdated": "2026-11-11T21:31:53.632Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiOS",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortios:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.12",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.13",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.0.0",
|
||||
"lessThanOrEqual": "7.0.19",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker with HA FGSP + standalone-config-sync, or autoscale to execute command as super admin via crafted HA packets."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:53.632Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-306",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiOS version 8.0.1 or above\nUpgrade to FortiOS version 7.6.8 or above\nUpgrade to FortiOS version 7.4.13 or above\nUpgrade to FortiOS version 7.2.14 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-273",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-273"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,206 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126262",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:10:16.521Z",
|
||||
"datePublished": "2026-11-11T21:31:54.288Z",
|
||||
"dateUpdated": "2026-11-11T21:31:54.288Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiAnalyzer",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiManager",
|
||||
"cpes": [
|
||||
"cpe:2.3:o:fortinet:fortimanager:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.12:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.11:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.10:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.9:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.8:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.7:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"version": "8.0.0",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.7",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.11",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.2.0",
|
||||
"lessThanOrEqual": "7.2.12",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12 may allow an unauthenticated attacker who has access to the oftp port to execute code or command on the system via crafted OFTP packets."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:54.288Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Execute unauthorized code or commands",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.3,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiManager version 8.0.1 or above\nUpgrade to FortiManager version 7.6.8 or above\nUpgrade to FortiManager version 7.4.12 or above\nUpgrade to FortiManager version 7.2.13 or above\nUpgrade to FortiAnalyzer version 8.0.2 or above\nUpgrade to FortiAnalyzer version 7.6.8 or above\nUpgrade to FortiAnalyzer version 7.4.12 or above\nUpgrade to FortiAnalyzer version 7.2.13 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-276",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-276"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,114 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126263",
|
||||
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2026-11-10T20:10:19.532Z",
|
||||
"datePublished": "2026-11-11T21:31:52.954Z",
|
||||
"dateUpdated": "2026-11-11T21:31:52.954Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Fortinet",
|
||||
"product": "FortiMail",
|
||||
"cpes": [
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:*",
|
||||
"cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*"
|
||||
],
|
||||
"defaultStatus": "unaffected",
|
||||
"versions": [
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "8.0.0",
|
||||
"lessThanOrEqual": "8.0.1",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.6.0",
|
||||
"lessThanOrEqual": "7.6.4",
|
||||
"status": "affected"
|
||||
},
|
||||
{
|
||||
"versionType": "semver",
|
||||
"version": "7.4.0",
|
||||
"lessThanOrEqual": "7.4.6",
|
||||
"status": "affected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests."
|
||||
}
|
||||
],
|
||||
"providerMetadata": {
|
||||
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
|
||||
"shortName": "fortinet",
|
||||
"dateUpdated": "2026-11-11T21:31:52.954Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-89",
|
||||
"description": "Escalation of privilege",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"metrics": [
|
||||
{
|
||||
"format": "CVSS",
|
||||
"cvssV3_1": {
|
||||
"version": "3.1",
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 9.4,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"
|
||||
}
|
||||
}
|
||||
],
|
||||
"solutions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.7 or above"
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-277",
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-277"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126326",
|
||||
"assignerOrgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "DEVOLUTIONS",
|
||||
"dateReserved": "2026-11-10T20:23:00.345Z",
|
||||
"datePublished": "2026-11-11T21:25:53.824Z",
|
||||
"dateUpdated": "2026-11-11T21:25:53.824Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"shortName": "DEVOLUTIONS",
|
||||
"dateUpdated": "2026-11-11T21:25:53.824Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-284",
|
||||
"description": "CWE-284 Improper Access Control",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Devolutions",
|
||||
"product": "Server",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "2026.3.14",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only vault assignment management rights to escalate privileges and read vault entry passwords via a crafted role assignment request."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://devolutions.net/security/advisories/DEVO-2026-0041/"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.2"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126327",
|
||||
"assignerOrgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "DEVOLUTIONS",
|
||||
"dateReserved": "2026-11-10T20:26:37.533Z",
|
||||
"datePublished": "2026-11-11T21:21:15.449Z",
|
||||
"dateUpdated": "2026-11-11T21:21:15.449Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"shortName": "DEVOLUTIONS",
|
||||
"dateUpdated": "2026-11-11T21:21:15.449Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-200",
|
||||
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Devolutions",
|
||||
"product": "Server",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "2026.3.14",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to view passwords to obtain historical entry passwords via the connection history API.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to view passwords to obtain historical entry passwords via the connection history API."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://devolutions.net/security/advisories/DEVO-2026-0041/"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.2"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126328",
|
||||
"assignerOrgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "DEVOLUTIONS",
|
||||
"dateReserved": "2026-11-10T20:27:29.029Z",
|
||||
"datePublished": "2026-11-11T21:23:00.048Z",
|
||||
"dateUpdated": "2026-11-11T21:23:00.048Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"shortName": "DEVOLUTIONS",
|
||||
"dateUpdated": "2026-11-11T21:23:00.048Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-312",
|
||||
"description": "CWE-312 Cleartext Storage of Sensitive Information",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Devolutions",
|
||||
"product": "Server",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "2026.3.14",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' MFA shared secrets via the user API responses."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://devolutions.net/security/advisories/DEVO-2026-0041/"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.2"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-126331",
|
||||
"assignerOrgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "DEVOLUTIONS",
|
||||
"dateReserved": "2026-11-10T20:29:35.173Z",
|
||||
"datePublished": "2026-11-11T21:24:17.153Z",
|
||||
"dateUpdated": "2026-11-11T21:24:17.153Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "bfee16bd-18e6-446c-9a65-f5b2e3d89c23",
|
||||
"shortName": "DEVOLUTIONS",
|
||||
"dateUpdated": "2026-11-11T21:24:17.153Z"
|
||||
},
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"cweId": "CWE-201",
|
||||
"description": "CWE-201 Insertion of Sensitive Information Into Sent Data",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"vendor": "Devolutions",
|
||||
"product": "Server",
|
||||
"versions": [
|
||||
{
|
||||
"status": "affected",
|
||||
"version": "0",
|
||||
"lessThan": "2026.3.14",
|
||||
"versionType": "custom"
|
||||
}
|
||||
],
|
||||
"defaultStatus": "unaffected"
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' API key secret hashes via the user list API response.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"type": "text/html",
|
||||
"base64": false,
|
||||
"value": "Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' API key secret hashes via the user list API response."
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://devolutions.net/security/advisories/DEVO-2026-0041/"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "Vulnogram 1.0.2"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user